Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/VqajcNPB7fMjBcUhpPAnFB-qCVg.roa
File:                     VqajcNPB7fMjBcUhpPAnFB-qCVg.roa (raw, json)
Hash identifier:          7VIjW4yT70DjeY5qLRhJFLeYefJOLFt2zB08eBBFggM=
Subject key identifier:   56:A6:A3:70:D3:C1:ED:F3:23:05:C5:21:A4:F0:27:14:1F:AA:09:58
Certificate issuer:       /CN=18f2f0de77f27a9d98b844550431b6880cd7368c
Certificate serial:       18680141
Authority key identifier: 18:F2:F0:DE:77:F2:7A:9D:98:B8:44:55:04:31:B6:88:0C:D7:36:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPLw3nfyep2YuERVBDG2iAzXNow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/VqajcNPB7fMjBcUhpPAnFB-qCVg.roa
Signing time:             Sat 01 Jan 2022 14:54:54 +0000
ROA not before:           Sat 01 Jan 2022 14:54:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209163
IP address blocks:        185.204.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409469249 (0x18680141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f2f0de77f27a9d98b844550431b6880cd7368c
        Validity
            Not Before: Jan  1 14:54:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56a6a370d3c1edf32305c521a4f027141faa0958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dd:7c:ed:f7:fd:e3:4d:77:e7:df:31:63:3c:
                    d2:a6:44:f5:23:2a:86:a3:22:58:5b:0e:40:97:97:
                    8f:eb:37:28:93:00:4a:01:5a:db:ef:cd:6f:83:16:
                    35:43:c7:2c:86:b3:2e:59:c9:fd:e4:dd:40:ed:2b:
                    10:a3:94:00:93:ff:23:ac:e4:34:91:9f:30:19:30:
                    a5:87:47:03:d5:fb:55:bc:fc:45:25:7a:04:e5:f9:
                    55:48:41:67:1f:c8:48:00:98:37:bf:83:7c:21:66:
                    5e:75:74:e1:99:9f:d0:96:53:2c:2d:9e:71:e3:7b:
                    81:9e:3b:7c:5a:ed:0c:78:b3:9b:82:74:74:9d:54:
                    6d:3e:2b:31:fe:5a:f9:89:b6:40:a1:d8:e5:cd:c8:
                    e1:d2:3d:5d:96:4b:74:02:70:bc:f7:43:0b:46:72:
                    2d:b8:92:d5:26:01:2c:85:a6:41:27:27:6e:6d:15:
                    b9:65:0c:73:38:b6:e6:39:10:bf:15:19:4d:e9:e0:
                    eb:9a:f6:af:39:d1:df:a1:da:08:d2:6b:dd:31:b3:
                    ba:22:e4:28:bb:7d:6d:50:74:a6:6b:c8:81:19:76:
                    1a:ba:e0:51:e1:51:1d:a9:6c:2c:a0:d6:a6:9d:19:
                    d5:2d:ce:a0:4e:ea:47:98:40:2f:35:4c:e5:fb:43:
                    58:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A6:A3:70:D3:C1:ED:F3:23:05:C5:21:A4:F0:27:14:1F:AA:09:58
            X509v3 Authority Key Identifier:
                keyid:18:F2:F0:DE:77:F2:7A:9D:98:B8:44:55:04:31:B6:88:0C:D7:36:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPLw3nfyep2YuERVBDG2iAzXNow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/VqajcNPB7fMjBcUhpPAnFB-qCVg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/GPLw3nfyep2YuERVBDG2iAzXNow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:87:05:ec:d1:26:40:e2:66:c7:52:1e:68:fd:98:4f:d4:de:
         6b:c9:22:d0:8c:dd:67:4c:8b:44:2c:c5:ab:82:4f:2c:84:99:
         26:2f:a6:69:75:58:27:7b:26:ad:1d:81:5f:07:72:7a:9f:b3:
         46:69:e2:10:d0:bb:cb:e6:12:20:f5:e4:7c:25:f2:a0:8c:82:
         b3:fc:7f:4a:a0:41:57:cd:1a:19:3b:6f:d0:9f:8f:45:c6:cf:
         06:05:9d:f5:93:38:c9:1e:b6:0f:d2:52:79:42:99:1d:3b:ad:
         3b:26:12:6b:5e:3a:6b:dc:01:2d:72:15:43:04:02:79:32:5b:
         d9:1e:e2:a0:16:d6:c9:30:ee:67:32:ce:10:a7:1d:ac:ba:e0:
         0a:7f:06:ad:9f:65:d5:86:53:c4:83:62:0e:04:99:31:ed:ca:
         fb:aa:2a:62:fa:8b:b3:09:5c:50:43:ff:ac:cf:93:72:c3:f1:
         37:1d:29:8e:bb:4d:5c:ea:11:db:ac:b2:90:e9:cb:13:c0:82:
         96:53:46:08:b0:99:64:bc:63:26:53:04:99:aa:a1:4c:fc:de:
         a2:bf:42:62:04:40:be:11:1c:c6:98:46:9f:c4:62:f9:f4:e5:
         b6:40:08:db:5e:f1:3e:92:14:86:47:5f:a7:4b:7c:1e:7c:cc:
         62:a2:11:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:12 2025 by rpki-client